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Question: 1 


An administrator working in a vSphere with Tanzu environment wants to ensure that all persistent 
volumes configured by developers within a namespace are placed on a defined subset of datastores 
The administrator has applied tags to the required datastores in the vSphere Client 


Which action should the administrator take next to meet the requirement? 


A. Create a storage policy containing the tagged datastores. and apply it to the vSphere Namespace. 
B. Create a storage class containing the tagged datastores. and apply it to the Supervisor Cluster 


C. Create a persistent volume claim containing the tagged datastores, and apply it to the vSphere 
Namespace. 


D. Create a storage Policy containing the tagged datastores. and apply it to the Supervisor Cluster. 


Answer: A 


Explanation: 
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Na 
mespace Namespace 


StorageClass StorageClass 


The vSphere administrator defines and assigns VM storage policies to a namespace: 
e VM storage policies are translated into Kubernetes storage classes. 
e Developers can access all assigned VM storage policies in the form of storage classes. 


e Developers cannot manage storage classes. 


Storage class names are created in the following way: 
e Spaces in VM Storage Policy names are replaced with hyphens (-). 


e Special characters are replaced with a digit. A VM Storage Policy called My Gold Policy $ is called 
my-gold-policy-O as a storage class. 


Question: 2 


Which three roles does the Spherelet perform? (Choose three ) 


A. Determines placement of vSphere pods 
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B. Manages node configuration 

C. Starts vSphere pods 

D. Provides a key-value store for pod configuration 
E. Communicates with Kubernetes API 


F. Provisions Tanzu Kubernetes clusters 


Answer: BCE 


Explanation: 


Supervisor Cluster Architecture 


ESXi Host ESXi Host 


Spherelet is a kubelet that is ported natively to ESXi. It allows the ESXi host to become part of a 
Kubernetes cluster. Soherelet performs the following functions: 


e Communicates with the control plane VMs 
e Manages node configuration 
e Starts vSphere Pods 


e Monitors vSphere Pods 
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Question: 3 


Why would developers choose to deploy an application as a vSphere Pod instead of a Tanzu 
Kubernetes cluster? 


A. They need the application to run as privileged pods. 


B. The application works with sensitive customer data, and they want strong resource and security 
isolation. 


C. They want to have root level access to the control plane and worker nodes in the Kubernetes 
cluster. 


D. The application requires a version of Kubernetes that is above the version running on the 
supervisor cluster. 


Answer: B 


Explanation: 


ESXi Host ESXi Host ESXi Host 


elet hostd opherele hostd | Spherelet hostd i 
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A vSphere Pod is a VM with a small footprint that runs one or more Linux containers. With vSphere 
Pods, workloads have the following capabilities: 


e Strong isolation from a Linux kernel based on Photon OS 
e Resource management using DRS 

e Same level of resource isolation as VMs 

e Open Container Initiative (OCI) compatible 

e Equivalent to a Kubernetes Container Host 


vSphere Pods are not compatible with vSphere vMotion. When an ESXi host is placed into 
maintenance mode, running vSphere Pods are drained and redeployed on another ESXi host, but 
only if the vSphere Pod is part of a ReplicaSet. 


Question: 4 


A company needs to provide global visibility and consistent policy management across multiple 
Tanzu Kubernetes Clusters, namespaces, and clouds Which VMvare solution will meet these 
requirements'? 


A. vSphere with Tanzu Supervisor Cluster 
B. vCenter Server 
C. Tanzu Mission Control 


D. Tanzu Kubernetes Grid Service 


Answer: C 


Explanation: 
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Clusters 


VMware Tanzu Mission Control™ is a centralized management platform for consistently operating 
and securing your Kubernetes infrastructure and modern applications across multiple teams and 
clouds. 


Question: 5 


A developer is connecting to a Tanzu Kubernetes Cluster using the kubectl vsphere login command 


Which information must be specified, in addition to both the name of the cluster and the Supervisor 
Cluster Control Wane IP? 


A. The path to the existing kubeconfig file and the SSO Username 


B. The path to the existing kubeconfig file and the Token D for the SSO credentials 


C. The name of the Supervisor Namespace and the Token ID for the SSO credentials 
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D. The name of the Supervisor Namespace and the SSO Username 


Answer: D 
Explanation: 
To connect to the Supervisor Cluster, run the following command. 
kubectl vsphere login --server=SUPERVISOR-CLUSTER-CONTROL-PLANE-IP 
--tanzu-kubernetes-cluster-name TANZU-KUBERNETES-CLUSTER-NAME 
--tanzu-kubernetes-cluster-namespace SUPERVISOR-NAMESPACE-WHERE-THE-CLUSTER-IS- 


DEPLOYED 

--vsphere-username VCENTER-SSO-USER-NAME 

For example: 

kubectl vsphere login --server=10.92.42.137 
--tanzu-kubernetes-cluster-name tanzu-kubernetes-cluster-01 
--tanzu-kubernetes-cluster-namespace tanzu-ns-1 


--vsphere-username administrator@example.com 
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